General

  • Target

    4c562328db8306067be8478bbfc281caca93853f22c7725ac70d18aea0c8e471

  • Size

    899KB

  • Sample

    250127-b7djmsvrbk

  • MD5

    7c731a51e4d96a578bf8580c561c0f62

  • SHA1

    4129362fd5ff9f67070319b4770d142c84915309

  • SHA256

    4c562328db8306067be8478bbfc281caca93853f22c7725ac70d18aea0c8e471

  • SHA512

    88f95e1a4f64887484b8e3d37d55c2bbe3a80bad231811d4dc4450680cf849f4d60784cd38fd564e9f2dca142bb8de5a4f2520c4b7827b883f6861bda7c0a46f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXd:7wqd87Vd

Score
10/10

Malware Config

Extracted

Family

gh0strat

C2

hackerinvasion.f3322.net

Targets

    • Target

      4c562328db8306067be8478bbfc281caca93853f22c7725ac70d18aea0c8e471

    • Size

      899KB

    • MD5

      7c731a51e4d96a578bf8580c561c0f62

    • SHA1

      4129362fd5ff9f67070319b4770d142c84915309

    • SHA256

      4c562328db8306067be8478bbfc281caca93853f22c7725ac70d18aea0c8e471

    • SHA512

      88f95e1a4f64887484b8e3d37d55c2bbe3a80bad231811d4dc4450680cf849f4d60784cd38fd564e9f2dca142bb8de5a4f2520c4b7827b883f6861bda7c0a46f

    • SSDEEP

      24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXd:7wqd87Vd

    Score
    10/10
    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • Gh0strat family

MITRE ATT&CK Enterprise v15

Tasks